Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/VsuqRQOIDF4bxjWr4U00ggk81So.roa
File: VsuqRQOIDF4bxjWr4U00ggk81So.roa (raw, json)
Hash identifier: jiuIUldzklRqEOj5WKWG/RoDS+rXEKawaMs1q48GbsI=
Subject key identifier: 56:CB:AA:45:03:88:0C:5E:1B:C6:35:AB:E1:4D:34:82:09:3C:D5:2A
Certificate issuer: /CN=be5b8a2b106d334b0c6c61e177aa62f44fe0e3b6
Certificate serial: 01A06B826051367C874F24086E99210D36D2
Authority key identifier: BE:5B:8A:2B:10:6D:33:4B:0C:6C:61:E1:77:AA:62:F4:4F:E0:E3:B6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vluKKxBtM0sMbGHhd6pi9E_g47Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/VsuqRQOIDF4bxjWr4U00ggk81So.roa
Signing time: Fri 04 Sep 2026 08:21:41 +0000
ROA not before: Fri 04 Sep 2026 08:21:41 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 16509
IP address blocks: 77.93.137.0/24 maxlen: 24
77.93.149.0/24 maxlen: 24
82.153.117.0/24 maxlen: 24
82.153.208.0/22 maxlen: 22
82.163.19.0/24 maxlen: 24
89.213.58.0/24 maxlen: 24
89.213.228.0/24 maxlen: 24
213.210.16.0/24 maxlen: 24
213.210.18.0/24 maxlen: 24
213.210.33.0/24 maxlen: 24
213.210.51.0/24 maxlen: 24
213.218.220.0/24 maxlen: 24
217.144.151.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/vluKKxBtM0sMbGHhd6pi9E_g47Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/vluKKxBtM0sMbGHhd6pi9E_g47Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/vluKKxBtM0sMbGHhd6pi9E_g47Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Sep 2026 13:22:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:6b:82:60:51:36:7c:87:4f:24:08:6e:99:21:0d:36:d2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=be5b8a2b106d334b0c6c61e177aa62f44fe0e3b6
Validity
Not Before: Sep 4 08:21:41 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=56cbaa4503880c5e1bc635abe14d3482093cd52a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:8c:6d:f1:ac:4d:36:9e:af:49:73:37:1b:ec:
c4:5b:62:33:2d:82:27:20:c5:99:b4:7e:d3:14:bd:
a8:e4:d9:bb:f6:0a:4e:2e:1e:73:d1:56:b2:35:89:
a0:77:64:1c:1a:47:c9:e6:69:ae:00:cd:a2:ce:9c:
35:81:55:22:18:97:35:b3:c6:8a:77:8c:66:eb:d6:
6a:ca:81:19:d3:07:d4:f0:58:1f:ba:d8:b4:11:53:
0d:71:d1:f1:63:8d:b9:02:1e:b9:96:17:cb:c0:00:
4e:ae:d7:7e:73:61:33:cd:f1:95:4a:44:c4:0e:d2:
e3:6c:08:f5:df:69:fc:a8:18:4a:50:01:61:7e:5e:
43:01:44:53:78:e7:64:8b:4f:97:99:db:41:1b:7c:
7a:af:05:ce:97:21:93:18:e6:7c:ae:8b:df:57:bd:
bd:6d:f8:78:5b:25:a8:61:18:55:02:09:74:c2:ad:
13:ba:84:5d:cc:64:43:5d:f0:f8:a0:cb:2e:09:1a:
58:24:7b:17:69:fa:2c:cd:cc:e2:e5:d3:c9:7d:5f:
81:c7:fa:0c:32:03:4b:55:54:43:71:e9:9e:3f:18:
e1:37:2c:c5:f6:bb:db:53:ad:a8:a7:0e:dd:7d:73:
4f:71:57:1f:68:20:c0:f2:1a:61:6c:be:9b:6a:eb:
59:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
56:CB:AA:45:03:88:0C:5E:1B:C6:35:AB:E1:4D:34:82:09:3C:D5:2A
X509v3 Authority Key Identifier:
keyid:BE:5B:8A:2B:10:6D:33:4B:0C:6C:61:E1:77:AA:62:F4:4F:E0:E3:B6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vluKKxBtM0sMbGHhd6pi9E_g47Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/VsuqRQOIDF4bxjWr4U00ggk81So.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/vluKKxBtM0sMbGHhd6pi9E_g47Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.93.137.0/24
77.93.149.0/24
82.153.117.0/24
82.153.208.0/22
82.163.19.0/24
89.213.58.0/24
89.213.228.0/24
213.210.16.0/24
213.210.18.0/24
213.210.33.0/24
213.210.51.0/24
213.218.220.0/24
217.144.151.0/24
Signature Algorithm: sha256WithRSAEncryption
39:d7:0e:54:7d:6a:5e:73:00:7f:d9:59:33:f2:dc:e7:eb:91:
08:80:4a:f3:eb:61:cd:02:58:1c:f0:30:0f:c0:2d:2a:f9:cc:
79:76:4a:01:7a:be:e2:dc:aa:ff:80:4b:07:c1:62:a2:70:12:
da:23:e6:d1:1f:5a:62:cf:94:86:04:32:bc:9b:84:94:05:f8:
1e:e3:b8:65:a0:9f:72:f7:9c:19:35:c3:c1:6c:8a:8d:85:1d:
c3:14:ee:1c:9a:6b:46:80:4a:c9:3d:e3:c7:52:eb:fb:88:b8:
c4:c2:13:e9:27:36:c2:d7:84:2f:2b:c8:d8:0e:be:9a:01:e4:
56:1b:e6:ad:46:5e:aa:ef:a4:88:18:9e:eb:b5:52:93:05:ca:
58:c7:5b:3f:a7:dc:b6:c2:07:54:e7:3b:dd:47:e8:58:3d:be:
6e:77:2f:bb:f1:6f:12:7c:ef:e8:96:f6:d4:19:c9:91:55:cb:
03:1c:d4:df:e6:ac:cc:02:9f:2d:06:a6:c4:54:d6:92:c0:6a:
09:e0:82:04:23:c0:61:13:ef:40:ff:da:19:95:41:d4:e8:60:
1a:ae:f5:59:55:57:24:a8:fe:1c:3b:a1:66:0b:2a:53:30:7c:
1b:75:0e:34:95:82:5b:33:c0:1e:ea:4c:d0:f5:0a:be:53:8c:
38:43:9e:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 18:00:44 2026 by rpki-client